Palo Alto Networks Certified Software Firewall Engineer

Question 1

Which two valid components are used in installation of a VM-Series firewall in an OpenStack environment? (Choose two.)

A. OpenStack heat template in JSON format

B. VM-Series VHD image

C. OpenStack heat template in YAML Ain't Markup Language (YAML) format

D. VM-Series qcow2 image

Correct Answer: C,D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

Which offering can gain visibility and prevent an attack by a malicious actor attempting to exploit a known web server vulnerability using encrypted communication?

A. Advanced URL Filtering (AURLF)

B. Secure Sockets Layer (SSL) Inbound Inspection

C. WildFire

D. OCSP

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

A customer in a VMware ESXi environment wants to add a VM-Series firewall and partition an existing group of virtual machines (VMs) in the same subnet into two groups. One group requires no additional security, but the second group requires substantially more security.
How can this partition be accomplished without editing the IP addresses or the default gateways of any of the guest VMs?

A. Send the VLAN out of the virtual environment into a hardware Palo Alto Networks firewall in Layer 3 mode. Use the same IP address as the old default gateway, then delete it.

B. Create a new virtual switch and use the VM-Series firewall to separate virtual switches using virtual wire mode. Then move the guests that require more security into the new virtual switch.

C. Edit the IP address of all of the affected VMs. www*

D. Create a Layer 3 interface in the same subnet as the VMs and then configure proxy Address Resolution Protocol (ARP).

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 4

Which two steps are involved in deployment of a VM-Series firewall on NSX? (Choose two.)

A. Obtain the Amazon Machine Images (AMIs) from marketplace.

B. Create a virtual data center (vDC) and a vApp that includes the VM-Series firewall.

C. Enable communication between Panorama and the NSX Manager.

D. Register the VM-Series firewall as a service.

Correct Answer: C,D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 5

Where do CN-Series devices obtain a VM-Series authorization key?

A. Panorama

B. GitHub

C. Customer Support Portal

D. Local installation

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 6

What Palo Alto Networks software firewall protects Amazon Web Services (AWS) deployments with network security delivered as a managed cloud service?

A. Cloud next-generation firewall

B. Ion-Series Ion-Series

C. VM-Series

D. CN-Series

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 7

Which two actions can be performed for VM-Series firewall licensing by an orchestration system? (Choose two.)

A. Renewing a license

B. Downloading a content update

C. Creating a license

D. Registering an authorization code

Correct Answer: C,D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Palo Alto Networks Certified Software Firewall Engineer - PCSFE Exam Practice Test

Latest Update

Useful Links

Contact Us